From 0759e0013604637ccabb5a96662c6bd72aaa2a6e Mon Sep 17 00:00:00 2001
From: MacBuchi <63749065+MacBuchi@users.noreply.github.com>
Date: Mon, 20 Jul 2026 19:09:20 +0200
Subject: [PATCH] ci: move the actions/* pins off the Node 20 runtime

Runs warn that actions targeting Node 20 are being force-run on Node 24.
That fallback is temporary; once it goes the steps fail outright.

  actions/checkout           v4 -> v7
  actions/upload-artifact    v4 -> v7
  actions/download-artifact  v4 -> v8
  softprops/action-gh-release v2 -> v3

Every input passed here still exists in the target version, checked
against each target's action.yml: fetch-depth and ref (checkout),
name/path/retention-days (upload-artifact), path/merge-multiple
(download-artifact), tag_name/files/generate_release_notes (gh-release).

astral-sh/setup-uv and dorny/test-reporter are also on node20 but are
left for a separate PR: those cross three and two majors respectively
and need their changelogs read, and a regression there should not force
a revert of these five.

Refs #11

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
---
 .github/workflows/bump.yml    | 2 +-
 .github/workflows/ci.yml      | 8 ++++----
 .github/workflows/release.yml | 8 ++++----
 3 files changed, 9 insertions(+), 9 deletions(-)

diff --git a/.github/workflows/bump.yml b/.github/workflows/bump.yml
index 6fec060..141df26 100644
--- a/.github/workflows/bump.yml
+++ b/.github/workflows/bump.yml
@@ -22,7 +22,7 @@ jobs:
 
     steps:
       - name: Checkout code (full history for commitizen)
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0
           # Uses github.token by default — no PAT required
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 67edc0f..73c71b7 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -15,7 +15,7 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       - name: Install uv
         uses: astral-sh/setup-uv@v5
@@ -45,7 +45,7 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       - name: Install uv
         uses: astral-sh/setup-uv@v5
@@ -95,7 +95,7 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       - name: Install uv
         uses: astral-sh/setup-uv@v5
@@ -150,7 +150,7 @@ jobs:
           if ($proc.ExitCode -ne 0) { Write-Error "App crashed with exit $($proc.ExitCode)"; exit 1 }
 
       - name: Upload build artifact
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: ${{ matrix.artifact }}
           path: dist/${{ matrix.artifact }}
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 109805e..0c409f2 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -36,7 +36,7 @@ jobs:
 
     steps:
       - name: Checkout code at tag
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
         with:
           ref: ${{ github.event_name == 'workflow_dispatch' && inputs.tag || github.ref }}
 
@@ -93,7 +93,7 @@ jobs:
           if ($proc.ExitCode -ne 0) { Write-Error "App crashed with exit $($proc.ExitCode)"; exit 1 }
 
       - name: Upload artifact
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: ${{ matrix.artifact }}
           path: dist/${{ matrix.artifact }}
@@ -109,13 +109,13 @@ jobs:
 
     steps:
       - name: Download all build artifacts
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v8
         with:
           path: release-artifacts
           merge-multiple: true
 
       - name: Create GitHub Release
-        uses: softprops/action-gh-release@v2
+        uses: softprops/action-gh-release@v3
         with:
           tag_name: ${{ github.event_name == 'workflow_dispatch' && inputs.tag || github.ref_name }}
           files: release-artifacts/*.zip